| Package | Affected versions | Patched versions |
|---|---|---|
| manageengine opmanager | ≤ 12.4.034 |
An issue was discovered in Zoho ManageEngine OpManager in builds before 14310. One can bypass the user password requirement and execute commands on the server. The "username+'@opm' string is used for the password. For example, if the username is admin, the password is admin@opm.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free